Suspicious Execution via macOS Script Editor — Detection Rule

Detects when the macOS Script Editor utility spawns an unusual child process.

Read the full analysis on IntelFusions